hakira-mcp 0.1.0 → 0.1.1

package/README.md

@@ -14,7 +14,7 @@ It exposes eight tools and one resource:
 | `get_audit_findings` | free | Finding **summaries** only. Then call `get_finding` for critical/high or when explaining/fixing. |
 | `get_finding` | free | Full finding (description, evidence, recommendation). Use after `get_audit_findings`. |
 | `list_audits` | free | Recent audits/sessions across your account (`is_current` marks this local project). Optional `workspace_id` filter. |
-| `list_workspaces` | free | All workspaces on your account; `is_current` marks this local project. |
+| `list_workspaces` | free | All workspaces on your account; `is_current` marks this local project (`current_workspace_id` is `null` until the first audit creates one). |
 | `cancel_audit` | free | Request cancellation of a running audit. |
 
 Resource `hakira://finding/<id>` returns the same full detail as `get_finding` (kept for hosts that prefer resources).

package/dist/git/repo-key.d.ts

@@ -5,3 +5,18 @@ export declare function normalizeRepoKey(url: string): string;
  * 2. else a stable uuid persisted in a locally-excluded `.hakira/mcp.json`.
  */
 export declare function resolveRepoKey(projectRoot: string): string;
+/**
+ * READ-ONLY twin of `resolveRepoKey` — returns the key this project is ALREADY
+ * bound by, or null. Never mints a uuid, never writes `.hakira/mcp.json`, never
+ * touches `info/exclude`.
+ *
+ * The free listing tools (`list_workspaces`, `list_audits`) use this. They only
+ * need to LABEL which workspace is the current project; calling `resolveRepoKey`
+ * + `bindWorkspace` made a read-only tool create a workspace server-side, and in
+ * a non-git directory that meant a workspace named after a fresh uuid plus a
+ * `.hakira/mcp.json` dropped in a folder the user never opted in from.
+ *
+ * `start_audit` deliberately keeps `resolveRepoKey` — creating the binding is
+ * exactly its job.
+ */
+export declare function peekRepoKey(projectRoot: string): string | null;

package/dist/git/repo-key.js

@@ -40,6 +40,36 @@ export function resolveRepoKey(projectRoot) {
     writeFileSync(file, JSON.stringify({ repo_key: id }, null, 2) + '\n');
     return id;
 }
+/**
+ * READ-ONLY twin of `resolveRepoKey` — returns the key this project is ALREADY
+ * bound by, or null. Never mints a uuid, never writes `.hakira/mcp.json`, never
+ * touches `info/exclude`.
+ *
+ * The free listing tools (`list_workspaces`, `list_audits`) use this. They only
+ * need to LABEL which workspace is the current project; calling `resolveRepoKey`
+ * + `bindWorkspace` made a read-only tool create a workspace server-side, and in
+ * a non-git directory that meant a workspace named after a fresh uuid plus a
+ * `.hakira/mcp.json` dropped in a folder the user never opted in from.
+ *
+ * `start_audit` deliberately keeps `resolveRepoKey` — creating the binding is
+ * exactly its job.
+ */
+export function peekRepoKey(projectRoot) {
+    const origin = tryGit(projectRoot, ['remote', 'get-url', 'origin']);
+    if (origin && origin.length > 0)
+        return normalizeRepoKey(origin);
+    // A uuid only counts if a PREVIOUS resolveRepoKey already persisted it.
+    try {
+        const file = join(projectRoot, '.hakira', 'mcp.json');
+        if (!existsSync(file))
+            return null;
+        const j = JSON.parse(readFileSync(file, 'utf8'));
+        return typeof j.repo_key === 'string' && j.repo_key.length > 0 ? j.repo_key : null;
+    }
+    catch {
+        return null;
+    }
+}
 const EXCLUDE_RULE = '# Hakira MCP local id\n.hakira/\n';
 /**
  * Ignore `.hakira/` via `$GIT_DIR/info/exclude` — NOT the project's `.gitignore`.

package/dist/tools/list-audits.js

@@ -1,12 +1,13 @@
 import { z } from 'zod';
 import { wrap, textResult } from './wrap.js';
-import { resolveRepoKey } from '../git/repo-key.js';
+import { peekRepoKey } from '../git/repo-key.js';
 export function registerListAudits(server, deps) {
     server.registerTool('list_audits', {
         title: 'List recent Hakira audits and sessions',
-        description: 'Free. List recent audits/sessions across your Hakira account (most recent first), with status, ' +
-            'workspace, origin (mcp|ui|gate), findings count and cost. `current_workspace_id` / `is_current` ' +
-            'mark the workspace bound to this local project. Optional `workspace_id` filters to one workspace. ' +
+        description: 'Free and read-only. List recent audits/sessions across your Hakira account (most recent first), ' +
+            'with status, workspace, origin (mcp|ui|gate), findings count and cost. `current_workspace_id` / ' +
+            '`is_current` mark the workspace bound to this local project, and `current_workspace_id` is null ' +
+            'when this project has no workspace yet. Optional `workspace_id` filters to one workspace. ' +
             'Use get_audit_events / get_audit_status / get_audit_findings with any owned audit_id.',
         inputSchema: {
             workspace_id: z
@@ -17,9 +18,13 @@ export function registerListAudits(server, deps) {
         },
     }, async (args) => wrap(deps, async () => {
         await deps.resolveToken();
-        const repoKey = resolveRepoKey(deps.root);
-        const bind = await deps.cp.bindWorkspace(repoKey);
-        const current = bind.workspace_id;
+        // Match, never bind (see peekRepoKey). The workspace list is the only
+        // place repo_key is exposed, so resolving `current` costs one extra free
+        // GET — worth it to keep a read-only tool read-only.
+        const repoKey = peekRepoKey(deps.root);
+        const current = repoKey
+            ? ((await deps.cp.listWorkspaces()).workspaces.find((w) => w.repo_key === repoKey)?.workspace_id ?? null)
+            : null;
         const { audits } = await deps.cp.listAudits({
             ...(args.workspace_id ? { workspace_id: args.workspace_id } : {}),
             limit: args.limit,

package/dist/tools/list-workspaces.js

@@ -1,18 +1,21 @@
 import { wrap, textResult } from './wrap.js';
-import { resolveRepoKey } from '../git/repo-key.js';
+import { peekRepoKey } from '../git/repo-key.js';
 export function registerListWorkspaces(server, deps) {
     server.registerTool('list_workspaces', {
         title: 'List all Hakira workspaces',
-        description: 'Free. List every workspace on your Hakira account. `current_workspace_id` / `is_current` mark ' +
-            'the workspace bound to this local project (via git remote / .hakira/mcp.json). Use list_audits ' +
-            'to see sessions; start_audit always runs on the current project workspace.',
+        description: 'Free and read-only. List every workspace on your Hakira account. `current_workspace_id` / ' +
+            '`is_current` mark the workspace bound to this local project (via git remote / .hakira/mcp.json); ' +
+            '`current_workspace_id` is null when this project has no workspace yet — the first start_audit ' +
+            'creates it. Use list_audits to see sessions; start_audit always runs on the current project workspace.',
         inputSchema: {},
     }, async () => wrap(deps, async () => {
         await deps.resolveToken();
-        const repoKey = resolveRepoKey(deps.root);
-        const bind = await deps.cp.bindWorkspace(repoKey);
-        const current = bind.workspace_id;
         const { workspaces } = await deps.cp.listWorkspaces();
+        // Match, never bind: listing must not create a workspace as a side effect.
+        const repoKey = peekRepoKey(deps.root);
+        const current = repoKey
+            ? (workspaces.find((w) => w.repo_key === repoKey)?.workspace_id ?? null)
+            : null;
         return textResult({
             current_workspace_id: current,
             workspaces: workspaces.map((w) => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hakira-mcp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Hakira MCP server — trigger Hakira cloud security audits from a coding agent",
   "type": "module",
   "license": "MIT",
@@ -17,10 +17,20 @@
     "ai",
     "hakira"
   ],
-  "bin": { "hakira-mcp": "dist/index.js" },
-  "files": ["dist", "README.md", "LICENSE"],
-  "engines": { "node": ">=18" },
-  "publishConfig": { "access": "public" },
+  "bin": {
+    "hakira-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "rm -rf dist && tsc && chmod +x dist/index.js",
     "dev": "tsx src/index.ts",